fredrik/logcheck
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Nya regeluppdateringar

Browse Source
This commit is contained in:
fredrik
2022-02-06 09:41:02 +01:00
parent 363b1571a1
commit 9f97deb5ac
5 changed files with 43 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
logcheck-fw-sshd
View File

@@ -136,11 +136,22 @@
#Oct 28 07:58:37 nada sshd[1041]: error: kex_exchange_identification: Connection closed by remote host
#Oct 28 12:23:29 nada sshd[14913]: error: kex_exchange_identification: read: Connection reset by peer
\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: error: kex_exchange_identification: (read: )?Connection (closed|reset) by (remote host|peer)
#Feb 5 10:57:24 nada sshd[10567]: error: kex_exchange_identification: banner line contains invalid characters
#Feb 4 12:47:13 nada sshd[8428]: error: kex_exchange_identification: client sent invalid protocol identifier "0"
\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: error: kex_exchange_identification:
#Feb 5 10:57:24 nada sshd[10567]: banner exchange: Connection from 164.52.24.164 port 40043: invalid format
\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: banner exchange:
#Feb 5 10:57:28 nada sshd[10568]: error: kex protocol error: type 30 seq 1 [preauth]
\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: error: kex protocol error:
#Oct 28 07:58:37 nada sshd[1041]: Connection closed by 141.98.10.82 port 40176
#Oct 28 12:23:29 nada sshd[14913]: Connection reset by 185.73.124.100 port 12384
\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Connection (closed|reset) by [.:[:digit:]]+ port [[:digit:]]+
#Oct 28 19:58:35 nada sshd[12067]: Connection reset by invalid user 178.73.215.171 port 60178 [preauth]
\w{3} [ :[:digit:]]{11} [._[:alnum:]-]+ sshd\[[[:digit:]]+\]: Connection reset by invalid user [.:[:digit:]]+ port [[:digit:]]+ \[preauth\]